KITA Privacy Policy

Last updated 27 June 2026

1. Who we are

KITA is a mobile and web dating service operated by B4U SRL, registered at VIA SPAGNA 1, 65015 MONTESILVANO, ITALY ("KITA", "we", "us", "our").

Under Philippine law. KITA is the personal information controller as defined by the Philippine Data Privacy Act of 2012 (Republic Act No. 10173, as amended, and its implementing rules and regulations, together the "DPA"). Our Data Protection Officer, required under the DPA, is Alessandro Mazzocco and can be contacted at dpo@kitadate.net. We have registered our personal data processing system with the National Privacy Commission as required for entities processing sensitive personal information.

Under European law. B4U SRL is a company established in the European Union (Italy). It is the controller of personal data under the General Data Protection Regulation (EU) 2016/679 (the "GDPR"), which applies to our processing both because we are established in the EU and because we offer the service to users in the European Economic Area.

For any privacy question, contact us at hello@kitadate.net or write to our Data Protection Officer at dpo@kitadate.net.

2. Who can use KITA

KITA is for adults only. You must be at least 18 years old, or older where your local law sets a higher age. We do not knowingly collect data from anyone under 18. If we learn that a user is under 18, we delete the account and all associated data without delay. If you believe a user is under 18, please report them in the app or contact us at hello@kitadate.net.

3. The data we collect

3.1 Account and profile data

This includes your name, email address, phone number, date of birth, gender, and the city you are in. It also includes the content of your profile, which means your photos, your bio, your interests, the relationship intention you declare, your availability such as days, time slots and notice required, and the prompts you answer.

3.2 Identity verification data

KITA requires identity verification before a user can send messages. Depending on the verification level, we process a live selfie to confirm you match your profile photos, a connected social account from which we read only a verification signal, and for the highest tier an identity document. Under Philippine law, identity documents and biometric data such as the selfie are classified as sensitive personal information. Identity documents are deleted promptly after the verification check is complete, and only the outcome is kept. The verification selfie and liveness video are kept for the life of your account so we can re-check identity and protect against impersonation, fraud and abuse; they are stored in a restricted, private environment, are never shown to other users, and are deleted when you delete your account.

3.3 Location data

To show you people near you we process your location. You control whether you share precise location through your device settings. If you disable precise location some matching features will not work. We do not share your exact coordinates with other users. We show only a general distance.

3.4 Activity data

This includes the profiles you like, pass or interact with, the connections you form, the messages you exchange, and how you use the features of the service.

3.5 Sensitive personal information

Under the Philippine DPA and the GDPR, certain categories of data require stronger protection. Because KITA is a dating service, your profile may reveal information about your sex life or sexual orientation. The selfie used for verification is treated as biometric data. Identity documents are sensitive personal information. We process these only with your explicit and informed consent given when you register and complete verification.

3.6 Technical data

This includes your device type, operating system, app version, a device identifier, your internet protocol address, and access logs needed for security and to operate the service.

3.7 Payment data

Premium subscriptions are processed by the Apple App Store and the Google Play Store under their own terms and privacy policies. We receive only confirmation of your subscription status. We never see your card or bank details.

4. Why we collect your data and the legal basis

4.1 Under Philippine law

The DPA requires us to state a lawful criterion for every processing activity.

We collect and use your account, profile, location and activity data to provide the KITA service and to perform our contract with you. We process sensitive personal information including biometric data and data that may reveal sexual orientation with your explicit consent, which you give when you create your profile and complete verification. We process security logs and fraud signals to comply with legal obligations and to protect the safety of users and of the service. We process data for legitimate interests where these do not override your rights, for example to improve the service and to prevent abuse.

4.2 Under the GDPR

For users in the European Economic Area we apply the same purposes as above. The legal bases are performance of contract for account and profile data, explicit consent for special category data including biometric and sexual orientation data, compliance with legal obligations, and legitimate interests where proportionate. Where we rely on legitimate interests you have the right to object as described in Section 10.

5. How identity verification works

Verification is central to KITA. We want the process to be fully transparent.

The selfie check compares a live image with your profile photos to confirm you are real and presenting your own pictures. The social check reads only a confirmation signal from the linked account and never reads private content or stores the link. The document check, available at the premium verification tier, confirms your identity against an official document and the document is then immediately deleted, keeping only the outcome and date. The selfie and liveness video are kept for the life of your account for ongoing identity assurance and safety. All verification files are stored in a separate restricted environment, never on the public network, and are never shown to other users.

6. Who we share your data with

We do not sell your personal data.

Other users see only what you choose to make visible in your profile, your photos, bio, interests, declared intention, general distance and availability, and your verification badges. They never see your exact location, contact details, or identity documents.

We share data with trusted service providers who process it only on our instructions and under contractual safeguards. These include OVHcloud, whose servers for KITA are in Singapore, Cloudflare for content delivery and storage, Firebase by Google for push notifications, Resend for email, Twilio for sending phone verification codes by SMS and WhatsApp, Google and Meta where you choose to sign in with your Google, Apple or Facebook account, and the Apple App Store and Google Play Store for distribution and payments.

We may disclose data to courts, the National Privacy Commission, or other authorities where the law requires, or to protect the rights, safety and security of our users and of KITA.

7. International transfers

KITA processes data on servers in Singapore, including the automated face-comparison check described in section 3, which runs on the same server and is never reachable from the public internet. Some service providers may process data in other countries.

For users in the Philippines. Data processed outside the Philippines is protected by contractual arrangements that require our providers to apply standards equivalent to those of the DPA. KITA remains accountable for data transferred abroad on its behalf, as required by the DPA and its implementing rules.

For users in the European Economic Area. Transfers outside the EEA are protected by Standard Contractual Clauses approved by the European Commission. You can request a copy from us at hello@kitadate.net.

8. How long we keep your data

We keep personal data only for as long as we need it. The list below sets out our standard retention periods. Where the law requires a different period, or where data is needed to resolve a dispute or enforce our terms, that applies instead.

• Account and profile data — while your account is active.
• Data after you delete your account — removed within 30 days, except the items below.
• Identity documents (premium level 3 verification) — deleted immediately after the check; only the outcome is kept.
• Verification selfie and liveness video — kept for the life of the account so we can re-check identity, protect against impersonation and fraud, and support safety investigations; deleted when you delete your account.
• Verification outcome and date — for the life of the account.
• Messages and matches — while active; deleted when you delete your account.
• Precise location — stored only as your latest position; deleted with your account.
• Security and access logs — up to 12 months.
• Reports, blocks and safety records — up to 24 months from creation, to prevent abuse, even after an account is deleted.
• Consent records (terms and privacy) — for the life of the account and up to 5 years after, as proof of consent.
• Subscription and transaction confirmations — as required by tax and accounting law; payment details are held by the app stores, not by us.

These periods are indicative and we review them as the service and the law evolve. When you delete your account we remove your personal data as described in Section 11, subject to the retention above.

9. Your rights under Philippine law

Under the DPA you have the following rights regarding your personal data.

You have the right to be informed about what data we collect, why, and how we use it. You have the right to access a copy of your personal data we hold. You have the right to correct inaccurate or incomplete data. You have the right to object to processing where we rely on legitimate interests, or to processing for direct marketing. You have the right to erase or block data that is incomplete, outdated, false, or unlawfully obtained. You have the right to data portability, to receive your data in a structured format. You have the right to claim damages for any violation of your rights under the DPA.

To exercise any of these rights, contact us at hello@kitadate.net. We will respond within the period required by the DPA, generally within 15 business days for access requests. If you are not satisfied with our response you have the right to file a complaint with the National Privacy Commission at www.privacy.gov.ph.

10. Your rights under the GDPR

If you are in the European Economic Area you have the right to access your data, to have inaccurate data corrected, to have your data erased where the law allows, to restrict processing in certain circumstances, to object to processing based on legitimate interests, to receive your data in a portable format, and to withdraw consent at any time without affecting processing already carried out on the basis of that consent.

To exercise these rights, contact us at hello@kitadate.net. You also have the right to lodge a complaint with your local data protection authority.

11. How to exercise your rights in the app

Most rights can be exercised directly in the KITA app. You can download a copy of your profile data, edit or delete your photos and bio, and delete your account. When you delete your account we run a process that removes your photos, verification outcome, messages, matches, location data and account information. Deletion is permanent and cannot be undone.

12. Security

We use technical and organisational measures appropriate to the sensitivity of the data we process. These include encryption in transit, restricted access to verification data, separation of sensitive verification files from public profile data, human review of profile photos alongside a reporting system that lets any member flag a photo for immediate re-review, and immediate deletion of identity documents after verification. We maintain procedures to detect, contain and report security incidents. If a breach affecting your data occurs, we will notify you and the relevant authorities, including the National Privacy Commission, within the timeframes required by applicable law.

13. Other jurisdictions

KITA is a service designed for Southeast Asia and may expand to additional markets. Each launch in a new country will be accompanied by a review of applicable local law. Key frameworks relevant to our planned expansion include the Singapore Personal Data Protection Act, the Indonesian Personal Data Protection Law, the Thai Personal Data Protection Act, and the Vietnamese Law on Cybersecurity and personal data protection decree. We will update this policy and seek appropriate legal review before entering each new market.

14. Cookies and similar technologies

Our website uses cookies and similar technologies to keep you signed in, remember your preferences, and understand how the service is used. Where the law requires consent for non essential technologies, we ask for it before placing them. Our Cookie Policy explains this in more detail.

15. Changes to this policy

We may update this policy as the service or the law changes. When we make a material change we will notify you in the app or by email before the change takes effect. The date at the top shows when the policy was last revised. Continued use of KITA after a notified change constitutes acceptance of the updated policy.

16. Automated processing and how matching works

To help you find people who fit your life, KITA uses automated processing. We build your discovery deck by filtering out people you cannot or have chosen not to see, then order the remaining profiles using signals such as verification level, distance, and a schedule compatibility score that compares the availability you and another person have entered. We may show a compatibility label based on that score.

This processing decides which profiles you see and in what order. It does not produce a legal effect or a similarly significant effect on you, and it never decides matches for you: a connection is only ever formed when two people both like each other. You can influence this processing at any time by editing your profile, availability and preferences, and you can object to processing based on our legitimate interests as described in Sections 9 and 10.

17. Marketing communications

We may send you service messages that are necessary to run KITA, such as security alerts, phone verification codes, and notices about your account. These are not marketing, and you cannot opt out of them while you have an account.

We will send promotional messages only where the law allows or where you have asked for them, and you can opt out at any time through your notification settings or the unsubscribe link in any marketing email. We do not sell your data and we do not use it for third party advertising.

18. How to contact us

Privacy team: hello@kitadate.net Data Protection Officer: Alessandro Mazzocco dpo@kitadate.net Postal address: B4U SRL, VIA SPAGNA 1, 65015 MONTESILVANO, ITALY

Philippine regulator. National Privacy Commission, 3rd Floor, Core G, GSIS Headquarters, Financial Center, Pasay City, Metro Manila. www.privacy.gov.ph

European regulator. Your local data protection authority in the European Economic Area.